Security Engineer (application)

1. Security Operation

• Perform vulnerability scanning and application penetration testing (OWASP).
• Provide security information and reports (including vulnerability and exploitation news, security patches, and fixes) and assist the operational team in implementing the fixes/patches in place.
• Member of Change Advisory Board, which makes recommendations for other teams when it comes to implementing important changes.
• Train and support staff on IT security matters.

   2. Security Design

• Design and implement security systems to defend network systems from security threats (viruses, Trojans, malware, spyware, malicious code, attackers/hackers, etc.).
• Consult and collaborate with the Architecture team on the security design of a new project.

  3. Security Compliance

• Ensured SPS Viet Nam's information security posture is aligned with the SPS Global group.  
• Ensured that IT security met company policy and ISMS/ISO 27001 standard.
• Respond to client, global group, internal/external auditor security questionnaires, and join audit sections.
• Ensured that the BoD (Board of Directors) is fully informed about the risks identified and the status of rectification, with the ability to report immediately to the CEO in the event of an emergency.
• Other duties as assigned by IT Manager.